Summaryinfo

A vulnerability, which was classified as problematic, was found in Sun JavaMail 1.1.3/1.2/1.3.2. This issue affects some unknown processing of the component Apache Tomcat. The manipulation of the argument Download results in information disclosure. This vulnerability is cataloged as CVE-2005-1754. Furthermore, there is an exploit available. The existence of this vulnerability is still disputed at present.

Detailsinfo

A vulnerability was found in Sun JavaMail 1.1.3/1.2/1.3.2 (Programming Language Software). It has been classified as problematic. Affected is some unknown functionality of the component Apache Tomcat. The manipulation of the argument Download with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

** DISPUTED ** JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products."

The weakness was shared 12/31/2005 by Rick (Website). The advisory is available at marc.theaimsgroup.com. This vulnerability is traded as CVE-2005-1754 since 05/26/2005. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details and a public exploit are known. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. The real existence of this vulnerability is still doubted at the moment. The commercial vulnerability scanner Qualys is able to test this issue with plugin 11889 (TripWire Enterprise Console Prior to version 8.6.0 Multiple Vulnerabilities.).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Exploit-DB (25702) and SecurityFocus (BID 13753†). The entries VDB-3414, VDB-10130, VDB-18549 and VDB-24854 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Programming Language Software

Vendor

• Sun

Name

• JavaMail

Version

• 1.1.3
• 1.2
• 1.3.2

License

• commercial

Support

• end of life (old version)

Website

• Vendor: https://www.oracle.com/sun/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion